{"id":4010531,"url":"https://alion.io/job/defense-procurement-agency-dot-application-security-engineer","title":"Application Security Engineer","company":{"id":2010419,"name":"Defense Procurement Agency (DOT)","domain":"dot.gov.ua","url":"https://alion.io/company/dot-gov-ua","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GitLab","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-11-10T09:41:30Z","employer_posted_date":null,"last_verified_at":"2026-11-10T09:41:30Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"The Defense Procurement Agency (DOT) is a national agency responsible for procuring ammunition, UAVs, military equipment, fuel, food, clothing, and other critical supplies for the Armed Forces of Ukraine and the Defense Forces.\n\nOur mission: Strengthening Ukraine by ensuring reliable support for the Defense Forces while fostering the development of the national defense industry.\n\nOur vision: To become the driving force behind the transformation of Ukraine's defense procurement ecosystem—not only operating the system, but continuously improving it.\n\nWe are currently looking for an Application Security Engineer who will be responsible for developing and implementing application security practices, building Secure Software Development Lifecycle (SSDLC) processes, integrating automated security controls into CI/CD pipelines, and ensuring security across infrastructure and software development processes.\n\nResponsibilities\n\nWork on Application Security / DevSecOps initiatives and contribute to the development of application security practices.\n\nDesign, implement and improve Secure Software Development Lifecycle (SSDLC) processes.\n\nAutomate security controls and integrate them into CI/CD pipelines.\n\nConduct security reviews of infrastructure, CI/CD pipelines and Infrastructure as Code (Terraform).\n\nCollaborate with Infrastructure, DevOps and Software Engineering teams to integrate security requirements into system architecture and software development processes.\n\nWork with Web Application Firewall (WAF) solutions.\n\nConduct Security Code Reviews and manual code analysis to identify potential security vulnerabilities.\n\nRequirements\n\nBachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science or a related field.\n\n3+ years of experience in cybersecurity, specifically in Application Security roles.\n\nHands-on experience in Application Security / DevSecOps and a solid understanding of SSDLC principles.\n\nKnowledge of secure software development practices and standards, including OWASP ASVS, OWASP SAMM and NIST SSDF.\n\nPractical experience with SAST, DAST, SCA and Secrets Scanning tools, as well as integrating security controls into CI/CD pipelines.\n\nUnderstanding of Cloud Security, containerization, and Docker/Kubernetes security.\n\nExperience writing Python and Bash scripts for automation.\n\nUnderstanding of network security fundamentals, HTTP/HTTPS, APIs and common web vulnerabilities.\n\nUnderstanding of microservices architecture and its security principles.\n\nKnowledge of common web application and API vulnerabilities, including OWASP Top 10.\n\nExperience working with GitLab.\n\nStrong analytical and systems thinking skills, proactivity and ability to make and justify decisions.\n\nHigh level of responsibility, result orientation and ability to work effectively in a team.\n\nWhat We Offer\n\nMeaningful work that directly contributes to strengthening Ukraine's defense capabilities.\n\nСompetitive salary and benefits.\n\nProfessional development, learning opportunities, and career growth.\n\nStructured onboarding and dedicated mentorship.\n\nA collaborative, supportive, and mission-driven team.\n\nBy joining our team, you will contribute to one of Ukraine's largest digital transformation initiatives in the defense sector and help build the future of defense procurement.\n\nReady to make a real impact? We'd love to hear from you. Apply today!\n\n* By submitting your CV, you consent to the processing of your personal data in accordance with applicable legislation.\n\n** Due to the high volume of applications, only candidates whose qualifications best match the position will be contacted.","description_format":"text","description_chars":3638,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","National Security","Military Logistics"],"lifecycle":[{"event":"open","at":"2026-11-10T09:41:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["seen:0","win:early"],"computed_at":"2026-11-10T12:21:32Z"},"pay":null,"html_url":"https://alion.io/job/defense-procurement-agency-dot-application-security-engineer","json_url":"https://alion.io/job/defense-procurement-agency-dot-application-security-engineer.json","meta":{"generated_at":"2026-11-10T12:21:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28686,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2010419},"rest":"https://alion.io/mcp/rest/get_company?id=2010419"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdefense-procurement-agency-dot-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdefense-procurement-agency-dot-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdefense-procurement-agency-dot-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/defense-procurement-agency-dot-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdefense-procurement-agency-dot-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4010531}},{"tool":"search_jobs","arguments":{"company":"dot.gov.ua","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4010531},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}